Privacy Policy

1. Introduction

Aegmis, Inc. ("Aegmis," "we," "us," or "our") is a company headquartered in the San Francisco Bay Area, California. This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our platform, APIs, SDKs, and related services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, company name, job title, and password when you register.
• Billing information: credit card details and billing address, processed via our third-party payment processor (we do not store raw card numbers).
• Communications: messages you send us via support tickets, email, or forms.

2.2 Information Collected Automatically

• Usage data: API calls, request/response metadata, feature usage, timestamps, and error logs.
• Device and browser data: IP address, browser type, operating system, and referring URLs.
• Cookies and similar technologies: session tokens, preference cookies, and analytics identifiers. See Section 7 for details.

2.3 Information from Third Parties

• OAuth providers: if you sign in via Google or GitHub, we receive your name, email, and profile picture from that provider.
• Slack and communication platforms: if you integrate our Services with Slack, we receive workspace identifiers, channel IDs, and message metadata necessary to deliver approval notifications.

3. How We Use Your Information

• Provide, operate, and improve the Services.
• Process transactions and send related notices (receipts, invoices).
• Send product updates, security alerts, and administrative messages.
• Respond to your support requests and questions.
• Monitor and analyze usage trends to improve user experience.
• Detect, investigate, and prevent fraudulent or unauthorized activity.
• Comply with legal obligations.

We do not sell your personal information to third parties.

4. Legal Bases for Processing (California Residents)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information. We process your data under the following bases:

• Performance of a contract: to provide the Services you have signed up for.
• Legitimate interests: to improve our platform, prevent fraud, and ensure security.
• Consent: for optional communications such as marketing emails.
• Legal obligation: to comply with applicable law.

5. How We Share Your Information

We may share your information with:

• Service providers: hosting providers (e.g., AWS), payment processors, analytics tools, and customer support platforms — only to the extent necessary to perform services on our behalf.
• Integration partners: third-party platforms (e.g., Slack) you explicitly connect to your Aegmis account.
• Business transfers: if Aegmis is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal requirements: when required by law, subpoena, or to protect the rights, property, or safety of Aegmis, our users, or the public.

We do not share your personal information with third parties for their own marketing purposes.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. After account termination, we may retain certain data for up to 12 months for backup, fraud prevention, or legal compliance purposes, then delete it.

7. Cookies

We use the following types of cookies:

You can disable non-essential cookies through your browser settings or our cookie preference center. Disabling essential cookies will affect your ability to use the Services.

8. Security

We implement industry-standard safeguards including TLS encryption in transit, encryption at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights (California Residents — CCPA/CPRA)

California residents may request:

• Access: a copy of the personal information we hold about you.
• Deletion: erasure of your personal information, subject to legal exceptions.
• Correction: correction of inaccurate personal information.
• Opt-out of sale/sharing: we do not sell personal information, but you may opt out of any future sharing for cross-context behavioral advertising.
• Limit use of sensitive personal information: to the extent we process sensitive data.

To exercise these rights, contact us at [email protected]. We will respond within 45 days. We will not discriminate against you for exercising your privacy rights.

10. Children's Privacy

The Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately at [email protected].

11. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or a prominent notice on our platform at least 30 days before they take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights: